[SECURITY] Fedora 45 Update: ocaml-qtest-2.11.2-33.fc45

qtest extracts inline unit tests written using a special syntax in comments. Those tests are then run using the oUnit framework and the qcheck library. The possibilities range from trivial tests =E2=80=94 extremely simple to use =E2=80=94 to sophisticated random generation of test cases...

CVE-2022-26146

Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...

EUVD-2018-7059

Malware in sbrugna...

EUVD-2022-30713

Malicious code in bioql PyPI...

Oracle Linux 8 : virt:kvm_utils1 (ELSA-2024-12435)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-12435 advisory. - Document CVEs as fixed Karl Heubaum CVE-2023-2700 - Fix off-by-one error in udevListInterfacesByStatus Martin Kletzander Orabug: 36364474...

com.btc.ep:btc-embeddedplatform (>=1.9.2-beta, <=2.5.9), com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) +37 more potentially affected by CVE-2024-23899 via org.jenkins-ci.plugins:git-server (1.5)

org.jenkins-ci.plugins:git-server MAVEN version 1.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins:git-server and may be impacted: - com.btc.ep:btc-embeddedplatform =1.9.2-beta, =1.3.0, =1.0.0-b15, =1.0.0-rc2, =1.0.0-rc2,...

Malicious code in usaa-qtest-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in usaa-qtest-reporter

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2023-1531 Malicious code in usaa-qtest-reporter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a04103c3f7b9d85cf20b6beb7a9d097048650f41a786c6ab1ef5d620132c27c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6) potentially affected by CVE-2022-43409 via org.jenkins-ci.plugins.workflow:workflow-support (2.15)

org.jenkins-ci.plugins.workflow:workflow-support MAVEN version 2.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-support and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.4.6 Source cves:...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-43405 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-43406 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2022-43404 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2022-43402 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2020-2109 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2019-10357 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2018-1000866 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2018-1000015 via org.jenkins-ci.plugins.workflow:workflow-durable-task-step (1.15)

org.jenkins-ci.plugins.workflow:workflow-durable-task-step MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-durable-task-step and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0,...

com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-29047 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)

org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...

Tricentis qTest Cross-Site Scripting Vulnerability

Tricentis qTest is used by Tricentis to centrally manage and understand software testing activities from conception to production. qTest has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by...